[EMAIL PROTECTED] wrote:
Hi List!
I'm getting hit by a bunch of annoying stock scams which aren't found by
any of my sare lists, they keep on scoring low.
So I decided to write a custom rule, which seem to work pretty well for
my case:
body __HILO_STOCKS1 /(High|Low|Curr[e3]nt|Cur(r|\r.|r[e3]nt|\.)\
Price|Price)[\:\ \t]+\$[\d\ ]+?(.*)(Last|Low|Growth|High|Sale|Price)/i
body __HILO_STOCKS2
/(hotlist|r[e3]cord|publicity|n[e3]ws|invest|incr[e3]as[e3]|[e3]xplosion|pric[e3]|high|pr[e3]mium|mark[e3]t|al[e3]rt|sym[b8]ol)/i
meta HILO_STOCKS ( __HILO_STOCKS1 && __HILO_STOCKS2 )
describe HILO_STOCKS Looks like stocks scam
score HILO_STOCKS 3.5
It's my first meta rule, which only gives a score if both conditions are
true, and I was wondering if there's a possibility to make the score
more "intelligent" :
- if __HILO_STOCKS1 fires up, i would like to give the score maybe 0.5
- if __HILO_STOCKS2 matches as well together with __HILO_STOCKS2, make
it 3.5
You could define:
body HILO_STOCKS1 ...
desc HILO_STOCKS1 ...
score HILO_STOCKS1 ...
body __HILO_STOCKS2 ...
and create a meta
meta HILO_STOCKS ( HILO_STOCKS1 && __HILO_STOCKS2 )
You could also rename __HILO_STOCKS2 to HILO_STOCKS2 to make it a
stand-alone rule..
